A Cross‑Site Request Forgery flaw in InfoScale Operations Manager (VIOM) version 9.1.3 enables an attacker to trick an authenticated user who has an active session into clicking a crafted link. The action performed by that malicious link causes the web application to process an unintended state‑changing request, leading to unauthorized changes to the system’s configuration or data.

The affected product is InfoScale Operations Manager (VIOM) v.9.1.3. No other vendors or versions are listed in the CVE data.

The CVE scores a CVSS base score of 8.8, indicating a high severity level, while the EPSS score is not available and it is not listed in the CISA KEV catalog. Because the exploitation requires an authenticated user with an active session, the attack vector is likely user interaction (the victim clicking a malicious link). The lack of exposure metrics makes precise risk assessment difficult, but CSRF is a well‑known weakness that can compromise data integrity if mitigations are not in place.